Event Details High
Event Summary
Event ID
15
Risk Score
Status
ResolvedTimestamp
Security Source
Microsoft Defender ATP (EDR)
Risk Category
Malware Detection
User Information
Mitigations
No mitigations have been applied to this event.
Event Details
| Sha256 | f1e2d3c4b5a6... |
|---|---|
| Alert Id | MS67890123 |
| Device Id | PRODUCT-LC123 |
| File Path | invoice_pdf.exe |
| Action Taken | blocked |
| Malware Name | TrickBot |
| Infection Vector | email_attachment |
Raw JSON Data
{
"action_taken": "blocked",
"alert_id": "MS67890123",
"device_id": "PRODUCT-LC123",
"file_path": "invoice_pdf.exe",
"infection_vector": "email_attachment",
"malware_name": "TrickBot",
"sha256": "f1e2d3c4b5a6..."
}